$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/01b1e3c2-0245-3e89-ba0b-3cb1e6f56235.roa File: 01b1e3c2-0245-3e89-ba0b-3cb1e6f56235.roa (raw, json) Hash identifier: RTtp7Xyxfxa+0DKWbsrW3x39EOHd+Bqe71XWhcGj+pU= Subject key identifier: 4E:4B:A7:71:30:6B:C2:E5:D0:95:39:27:6F:24:20:61:D1:D2:EC:C8 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584FB3A66D5E1DDF0281F96EAEC0 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/01b1e3c2-0245-3e89-ba0b-3cb1e6f56235.roa Signing time: Mon 02 Nov 2026 02:00:13 +0000 ROA not before: Mon 02 Nov 2026 02:00:13 +0000 ROA not after: Sun 31 Jan 2027 02:00:13 +0000 asID: 3356 IP address blocks: 8.29.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b3:a6:6d:5e:1d:df:02:81:f9:6e:ae:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Nov 2 02:00:13 2026 GMT Not After : Jan 31 02:00:13 2027 GMT Subject: CN=7a07328c-516f-4a7d-a574-5a6de70c1e3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:fc:e9:cf:80:bd:3d:72:45:87:b0:1e:d9:06: 38:66:36:52:7f:04:64:2c:0b:90:a6:a4:10:1a:e9: a2:87:41:2f:b7:e6:d4:38:68:1d:3b:c6:01:58:ba: ac:d0:b2:e9:f7:a4:6d:55:64:86:b8:3c:4e:1e:75: a8:43:97:8c:21:83:65:37:5a:7f:aa:54:1b:80:78: 93:a7:65:97:6f:03:07:f5:ff:c4:32:71:3e:6d:bc: 9d:d2:f5:00:29:bc:0c:56:7b:97:f8:97:d4:c4:a7: 45:9b:1c:9d:9d:eb:52:ec:64:0d:4a:b5:59:ba:16: 3a:eb:19:eb:90:46:32:fd:97:d8:2e:77:19:0f:f0: d6:8b:ec:41:a2:f9:3d:1d:fb:f9:76:04:66:7f:7d: 9e:f3:a1:80:b7:98:cb:ac:19:7f:b3:d0:48:20:3c: ea:6f:a8:d6:c9:b3:95:bf:b7:ae:36:6c:a1:9a:3d: d6:1c:c0:4d:e4:de:98:32:fc:e7:43:bc:3c:1d:d9: 68:c3:17:cb:e6:9e:d7:cf:df:4e:17:81:c7:c9:4d: c0:d1:83:d8:f9:48:36:2e:aa:bb:bf:91:a1:fd:d6: d6:ff:e1:27:1a:7f:92:7c:1e:72:9d:4b:30:b7:e4: 55:80:6c:b7:c4:8a:47:b4:73:e9:23:82:de:53:0a: 0f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:4B:A7:71:30:6B:C2:E5:D0:95:39:27:6F:24:20:61:D1:D2:EC:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/01b1e3c2-0245-3e89-ba0b-3cb1e6f56235.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.29.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:9d:b4:ce:1a:d9:ae:b7:fc:11:0a:03:22:6f:64:b9:4e:35: 3e:f8:3b:d0:72:fd:02:20:2d:ef:da:d1:79:b3:e4:d3:cc:75: 26:6f:5a:13:9f:0b:eb:a4:f3:75:a0:e5:bd:e6:69:48:0c:bc: 03:9d:ba:1d:6c:63:71:ef:f2:68:f0:36:cd:79:22:b0:43:f0: 80:75:5a:37:7d:7f:0a:af:16:ac:9a:58:96:b6:b7:46:95:a3: bd:e0:d7:1e:4b:e3:2d:0a:19:e1:a6:7e:48:60:ca:fb:c3:7a: a4:b3:24:e3:bf:7f:e9:0f:f3:a1:07:e4:3d:20:83:2c:8e:de: 42:79:4e:65:fe:42:2b:c1:40:1c:64:dd:71:03:21:65:05:ce: 92:7a:fa:ef:4f:7b:51:53:5f:ae:ff:a8:f4:91:69:12:b1:6b: de:3f:ec:a8:3e:54:76:39:aa:f0:4e:5c:60:60:3d:11:39:6a: 7c:c7:c7:72:af:da:27:39:f3:da:bd:ea:83:e3:23:57:38:c8: 99:cf:8d:0d:9e:8c:b2:f1:ee:16:05:6e:17:bf:14:bd:df:4d: 03:aa:e5:00:eb:92:45:46:86:b3:b2:8d:b2:fa:ee:55:d9:6f: 74:17:80:61:e9:07:0a:0a:35:1f:11:d6:3c:f6:a7:d8:d2:c5: 17:15:14:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+zpm1eHd8CgflursAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MTEwMjAyMDAxM1oXDTI3MDEzMTAyMDAxM1owLzEtMCsGA1UEAxMk N2EwNzMyOGMtNTE2Zi00YTdkLWE1NzQtNWE2ZGU3MGMxZTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivzpz4C9PXJFh7Ae2QY4ZjZSfwRkLAuQpqQQ Gumih0Evt+bUOGgdO8YBWLqs0LLp96RtVWSGuDxOHnWoQ5eMIYNlN1p/qlQbgHiT p2WXbwMH9f/EMnE+bbyd0vUAKbwMVnuX+JfUxKdFmxydnetS7GQNSrVZuhY66xnr kEYy/ZfYLncZD/DWi+xBovk9Hfv5dgRmf32e86GAt5jLrBl/s9BIIDzqb6jWybOV v7euNmyhmj3WHMBN5N6YMvznQ7w8HdlowxfL5p7Xz99OF4HHyU3A0YPY+Ug2Lqq7 v5Gh/dbW/+EnGn+SfB5ynUswt+RVgGy3xIpHtHPpI4LeUwoPKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5Lp3Ewa8Ll0JU5J28kIGHR0uzIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMDFiMWUzYzItMDI0NS0z ZTg5LWJhMGItM2NiMWU2ZjU2MjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQECB0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqdtM4a2a63/BEKAyJvZLlONT74O9By/QIgLe/a0Xmz5NPMdSZvWhOf C+uk83Wg5b3maUgMvAOduh1sY3Hv8mjwNs15IrBD8IB1Wjd9fwqvFqyaWJa2t0aV o73g1x5L4y0KGeGmfkhgyvvDeqSzJOO/f+kP86EH5D0ggyyO3kJ5TmX+QivBQBxk 3XEDIWUFzpJ6+u9Pe1FTX67/qPSRaRKxa94/7Kg+VHY5qvBOXGBgPRE5anzHx3Kv 2ic589q96oPjI1c4yJnPjQ2ejLLx7hYFbhe/FL3fTQOq5QDrkkVGhrOyjbL67lXZ b3QXgGHpBwoKNR8R1jz2p9jSxRcVFL4= -----END CERTIFICATE-----Generated at Wed Nov 4 23:46:49 2026 by rpki-client